Approved changes feed: RSS · Atom

cpe:2.3:a:phpbb_group:phpbb:1.2.1:*:*:*:*:*:*:*

part: a version: 1.2.1 update: *

VendorPhpbb Group (b7cc37b4-8895-556d-8454-6a4fe1da6960)
ProductPhpbb (d9104123-6a84-5cbf-bbd7-9e906abc49dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/punbb/punbb purl2cpe 2026-06-01 10:15:23.735462

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2134 vulnerable 2026-06-08 04:48:58.976940 Details available
PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
Published: 2006-05-02T10:00:00.000Z
Updated: 2024-08-07T17:35:31.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0659 vulnerable 2026-06-08 04:48:13.254361 Details available
phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message.
Published: 2005-03-07T05:00:00.000Z
Updated: 2024-08-07T21:21:06.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0614 vulnerable 2026-06-08 04:48:13.169967 Details available
sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie.
Published: 2005-03-03T05:00:00.000Z
Updated: 2024-08-07T21:21:06.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2350 vulnerable 2026-06-08 04:48:09.365141 Details available
SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter.
Published: 2005-08-16T04:00:00.000Z
Updated: 2024-08-08T01:22:13.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1315 vulnerable 2026-06-08 04:47:53.587696 Details available
viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into the result, which is then processed by PHP exec, as exploited by the Santy.A worm.
Published: 2004-12-31T05:00:00.000Z
Updated: 2024-08-08T00:46:12.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1216 vulnerable 2026-06-08 04:47:23.692390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1215 vulnerable 2026-06-08 04:47:23.685418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0533 vulnerable 2026-06-08 04:46:21.639350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0475 vulnerable 2026-06-08 04:46:21.518611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.